Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/1/34352e3136372e36302e302f32322d3232203d3e20323638303533.roa
File:                     34352e3136372e36302e302f32322d3232203d3e20323638303533.roa (raw, json)
Hash identifier:          +Bg125n6q37Tb9zE0C6MQqLRohpRTBUVk0e2YrV7GZY=
Subject key identifier:   6C:00:1A:29:12:DD:B4:59:75:8A:E7:AF:DE:69:A7:28:59:B9:80:E8
Certificate issuer:       /CN=0F1137C27E661ED0B131846131EE7EB20F7A2385
Certificate serial:       67E966DD823B29A2AC93AB3A6F2BAE3A61729550
Authority key identifier: 0F:11:37:C2:7E:66:1E:D0:B1:31:84:61:31:EE:7E:B2:0F:7A:23:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F1137C27E661ED0B131846131EE7EB20F7A2385.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/1/34352e3136372e36302e302f32322d3232203d3e20323638303533.roa
Signing time:             Fri 05 Apr 2024 00:11:03 +0000
ROA not before:           Fri 05 Apr 2024 00:06:03 +0000
ROA not after:            Fri 04 Apr 2025 00:11:03 +0000
asID:                     268053
IP address blocks:        45.167.60.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:e9:66:dd:82:3b:29:a2:ac:93:ab:3a:6f:2b:ae:3a:61:72:95:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F1137C27E661ED0B131846131EE7EB20F7A2385
        Validity
            Not Before: Apr  5 00:06:03 2024 GMT
            Not After : Apr  4 00:11:03 2025 GMT
        Subject: CN=6C001A2912DDB459758AE7AFDE69A72859B980E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7c:33:f6:fc:9c:b3:6f:b0:e3:f3:b4:0b:d9:
                    b5:fc:df:a1:af:1b:d0:4d:a0:fb:58:a6:6d:6c:62:
                    f2:67:51:9b:ca:ca:55:08:f2:c8:35:ed:9b:34:66:
                    30:ce:d0:58:e4:3e:41:84:98:86:2d:52:39:0b:29:
                    2c:77:34:bc:37:b7:66:1f:55:c3:a1:83:b2:d9:b8:
                    0e:c9:d1:9a:4f:0f:33:5e:04:29:f6:35:1f:8c:90:
                    f5:e1:f2:b4:82:83:5b:ce:78:81:ab:c5:d8:f1:91:
                    d0:40:2d:8d:67:9d:d5:43:34:d9:b2:c2:c2:5e:90:
                    78:1b:25:8c:55:69:c0:b3:4f:59:c8:f2:dc:eb:92:
                    1e:0e:d6:68:2e:cd:14:01:4a:38:f0:ae:9a:1e:c0:
                    90:de:d4:fa:42:29:b7:9a:2f:a8:c8:e4:bc:26:8c:
                    24:df:1a:a7:3a:bb:d8:ef:ac:ba:c4:22:35:bb:a7:
                    f5:35:6c:44:64:a2:cf:d8:91:55:02:4d:21:3f:ff:
                    65:9b:dc:09:70:a4:f2:a9:8a:06:7d:68:8e:e5:78:
                    54:3f:4e:f4:42:79:b2:10:73:d2:8c:73:ae:a5:e3:
                    8e:2e:f9:0c:52:06:55:19:ed:29:79:0a:01:eb:45:
                    2b:76:95:a4:4e:9b:ea:14:d2:50:a9:51:ea:94:3d:
                    9e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:00:1A:29:12:DD:B4:59:75:8A:E7:AF:DE:69:A7:28:59:B9:80:E8
            X509v3 Authority Key Identifier:
                keyid:0F:11:37:C2:7E:66:1E:D0:B1:31:84:61:31:EE:7E:B2:0F:7A:23:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/1/0F1137C27E661ED0B131846131EE7EB20F7A2385.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F1137C27E661ED0B131846131EE7EB20F7A2385.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/1/34352e3136372e36302e302f32322d3232203d3e20323638303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:3b:8e:c5:7a:8d:62:f0:e5:82:20:b1:b7:98:a0:84:2e:0f:
         10:c9:23:32:fa:ce:e4:d6:38:43:d6:cd:fb:a3:32:96:a0:ec:
         1e:79:11:6d:ae:c3:0c:d6:71:76:a0:2c:73:5e:51:cc:60:55:
         a6:97:0c:78:ce:c9:ae:26:71:f1:75:35:18:85:c2:af:3a:05:
         b9:ae:85:87:7b:23:32:19:63:07:79:99:d9:4a:d5:4a:1b:80:
         4a:6e:f9:8b:8d:3a:1e:c5:d6:e8:98:03:1a:fa:51:46:ac:e7:
         3b:00:c5:7d:b6:e1:2b:f3:bf:39:1b:51:29:e7:82:7b:c2:83:
         50:02:75:92:ad:ea:74:c5:af:60:be:10:54:27:f7:d4:ff:be:
         82:d5:b2:29:24:23:63:27:15:08:8e:d9:f1:1b:3b:f9:a4:46:
         cd:14:89:26:9e:32:dd:a6:df:c7:f0:0b:d5:2b:ec:5f:19:0b:
         e1:c8:48:91:2b:41:6b:3f:0e:8a:95:ec:14:47:fc:69:fd:ea:
         89:30:84:6c:5b:42:a5:2e:08:6d:4e:6e:08:c0:20:f4:77:fa:
         4d:1d:91:4c:a9:35:d5:3b:43:f9:03:ea:53:01:8e:6f:aa:87:
         f9:ca:79:b0:26:5f:35:c2:64:f3:6f:72:b5:6c:8c:2e:08:65:
         93:11:26:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 17:22:24 2024 by rpki-client on console-fra.rpki-client.org